Ghost Accounts Abuse GitHub API in Mass Recon Campaign

Collection of SecurityWeek stories covering multiple high-impact threats and developments: ghost accounts abusing the GitHub API for mass reconnaissance of organizations (repos and members); a network of ~200 malicious GitHub repositories using a Go module to stage PowerShell-based Windows malware via public dead-drops; GigaWiper—a backdoor with wiper, ransomware and multi-pass wiping capabilities—used for destructive system-level sabotage; Okta warnings of vishing campaigns that steer Microsoft 365 users to Entra ID phishing pages; ‘HalluSquatting’ attacks that weaponize AI hallucinations to達